CVE-2026-111880
high
CVSS 7.4
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash...
Summary
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash...
Original description
The description as published by the source.
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.
Source: NIST National Vulnerability Database NVD GitHub Advisory
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-111880 freerdp2
References
- web github.com
- web vulncheck.com
- web nvd.nist.gov
- web github.com